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Abstract — We construct new polar coding schemes for the 
transmission of quantum or private classical information over 
arbitrary quantum channels. In the former case, our coding 
scheme achieves the symmetric coherent information and in the 
latter the symmetric private information. Both schemes are built 
from a polar coding construction capable of transmitting classical 
information over a quantum channel [Wilde and Guha, IEEE 
Transactions on Information Theory, in press]. Appropriately 
merging two such classical-quantum schemes, one for transmit- 
ting "amplitude" information and the other for transmitting 
"phase," leads to the new private and quantum coding schemes, 
similar to the construction for Pauli and erasure channels in 
[Renes, Dupuis, and Renner, Physical Review Letters 109, 050504 
(2012)]. The encoding is entirely similar to the classical case, and 
thus efficient. The decoding can also be performed by successive 
cancellation, as in the classical case, but no efficient successive 
cancellation scheme is yet known for arbitrary quantum channels. 
An efficient code construction is unfortunately still unknown. 
Generally, our two coding schemes require entanglement or 
secret-key assistance, respectively, but we extend two known 
conditions under which the needed assistance rate vanishes. 
Finally, although our results are formulated for qubit channels, 
we show how the scheme can be extended to multiple qubits. This 
then demonstrates a near-explicit coding method for realizing one 
of the most striking phenomena in quantum information theory: 
the superactivation effect, whereby two quantum channels which 
individually have zero quantum capacity can have a non-zero 
quantum capacity when used together. 

POLAR coding is a promising code construction for trans- 
mitting classical information over classical channels 0]. 
Ankan proved that polar codes achieve the symmetric capacity 
of any classical channel, with an encoding and decoding 
complexity that is 0(N log N) where N is the number of 
channel uses. These codes exploit the channel polarization 
effect whereby a particular recursive encoding induces a set 
of virtual channels, such that some of the virtual channels are 
perfect for data transmission while the others are useless for 
this task. The fraction containing perfect virtual channels is 
equal to the channel's symmetric capacity^] 

In this paper, we offer new polar coding schemes for 
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transmitting quantum information or for privately transmitting 
classical information. Both are strongly based on ideas of 
Renes and Boileau [2], who showed that quantum or pri- 
vate coding protocols can be constructed from two differ- 
ent protocols that protect classical information encoded into 
complementary variables. In particular, a protocol for reliably 
transmitting quantum data can be built from a protocol that 
reliably recovers classical information encoded into an "am- 
plitude" variable and a protocol that reliably recovers "phase" 
information with the assistance of quantum side information. 
The quantum coding scheme uses the decoders of both of 
these tasks, while the private coding scheme needs only the 
decoder of the amplitude variable and uses the fact that the 
phase could have been decoded in order to ensure security of 
the data via an entropic uncertainty relation (see ||3], 0, 0, 
J5) for related ideas). 

These ideas were used to construct quantum and private 
polar coding schemes with explicit, efficient decoders in Q 
achieving rates equal to the symmetric coherent and private 
information, respectively, but only for a certain set of channels 
with essentially classical outputs (Pauli and erasure channels). 
Following a different approach, Wilde and Guha [8| con- 
structed quantum and private polar codes at these rates for any 
degradable channels for which the output to the environment is 
essentially classical. (In both cases, the private codes obey the 
so-called strong security criterion, such that the eavesdropper 
gets essentially no information about the transmitted informa- 
tion, not merely that she only gets information at a vanishing 
rate.) Both coding techniques require entanglement or secret- 
key assistance in the general case. 

Our new constructions have several advantages over these 
previous schemes: 

• The net communication rate is equal to the symmetric 
coherent or private information for an arbitrary quantum 
channel with qubit input. 

• The decoders are explicit, in the quantum case the 
decoder consists of O(N) rounds of coherent quantum 
successive cancellation followed by N CNOT gates, while 
only an incoherent implementation of quantum successive 
cancellation is required in the private case. 

• The entanglement or secret-key consumption rate van- 
ishes for any quantum channel which is either degradable 
or which satisfies a certain fidelity criterion. 

Following the multi-level polar coding method of J9], we 
show how to extend the coding scheme to channels with mul- 
tiple qubit inputs. This gives an explicit code construction for 
the superactivation effect, in which two zero-capacity channels 
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have a non-zero quantum capacity when used together [10] (in 
this sense, the channels activate each other). 

We structure this paper as follows. After setting notation 
and defining important quantites in Section Q] we describe 
the "amplitude" and "phase" channels relevant to our coding 
schemes in Section HU In Section [Till we recall the results 
on polarization of channels with classical input and quantum 
output, and in Section IIV1 we describe the simultaneous 
polarization of the amplitude and phase channels, which is 
the heart of our coding scheme. Sections [V] and |VT] detail our 
quantum and private coding schemes, respectively. Section \VU\ 
gives the two conditions under which the entanglement or 
secret-key assistance rate vanishes, while Section rVIIII outlines 
how to adapt our quantum polar coding scheme so that it 
can exhibit the superactivation effect. Finally, we conclude in 
Section |IX] with a summary and some open questions. 

I. Notation and Definitions 

A binary-input classical-quantum (cq) channel W : x — > 
p x prepares a quantum state p x at the output, depending on 
an input classical bit x. Two parameters that determine the 
performance of W are the fidelity 

f(w) = iivpuVpriii 

and the symmetric Holevo information 

J(W) = H{i( Po + pi)) - \[H{ Po ) + H{ Pl % 

where ||A||i = Tr[-\A4tA] and H(a) = -Tr{oTog 2 cr} is 
the von Neumann entropy. These parameters generalize the 
Bhattacharya parameter and the symmetric mutual information 
(T), respectively, (note that the former is denoted by Z(\N) 
in HI) and are related as ifTTl : 

J(W) « 1 <s> F(W) 
J(W) «0« F(W) « 1. 

The channel W is near perfect when I(W) « 1 and near 
useless when I(W) « 0. 

A qubit-input quantum channel Af A ^ B is a completely 
positive, trace preserving map from a two-dimensional input 
system A' to a e?-dimensional output system B. Every channel 
has an isometric extension (Stinespring dilation) to a partial 
isometry Uj§ ^ BR taking A' to B and an additional reservoir 
system R lfl2l . Fix an arbitrary basis with elements \z) and 
call it the computational or "amplitude" basis with z E {0, 1}. 
Let \x) denote the conjugate, Hadamard, or "phase" basis with 
x € {+,-} and |±) = (|0) ± |l))/\/2. Furthermore, let X 
denote the operator such that 

X\z) = \z®l), 

where arithmetic inside the ket is modulo 2, and Z the operator 
such that 

z\z) = (-iy\z). 

The symmetric coherent information of a channel is defined 

by 

/ sym (A0 = H(B) T - H(AB) T , (1) 



where t ab = Af A '^ B ($ AA ') and <& AA ' denotes the maxi- 
mally entangled state: 

1*^75 E l^> A ' = 7!I E W A W A '- 
ze{o,i} xe{+,-} 

A quantum wiretap channel J\f A ~^ BE 11131 . lfT4l is a com- 
pletely positive, trace preserving map with an input system 
A', an output system B for the legitimate receiver (named 
Bob), and an output system E for the wiretapper (named 
Eve). Appendix [B] shows that a classical wiretap channel is 
a special case of a quantum wiretap channel. The symmetric 
private information of a quantum wiretap channel N A ^ BE 
is defined by 

P sym (A0 = max[7(Z; B) T - I(Z: E) T ], (2) 

p ZA' 

where t zbe = Af A '^ BE (p ZA ') for p ZA ' a cq state of the 
form: 

p^' = lJ2\z) (z\ Z ®pf, 

z 

and pf an arbitrary set of (possibly mixed) states. 

II. Classical-Quantum Channels for 
Complementary Variables 

In this section we construct cq channels from a given 
quantum channel which will be relevant to the quantum coding 
procedure. Slight generalizations of these channels will be 
relevant to the private coding procedure. 

A. CQ Channels for Quantum Communication 

Following [2 1, we consider building up a quantum commu- 
nication protocol from two classical communication protocols 
that preserve classical information encoded into complemen- 
tary variables. In this vein, two particular classical-quantum 
(cq) channels are important. First, consider the cq channel 
induced by sending an amplitude basis state over Af 

W A :z->Af A '^ B (\z)(z\)^^, O) 

where the classical input z is a binary variable and the notation 
\N a indicates that the classical information is encoded into 
the amplitude basis. We can regard this as the sender (Alice) 
modulating a standard signal |0) with X z and transmitting the 
result to the receiver (Bob). 

For the other cq channel, suppose that Alice instead trans- 
mits a binary variable x by modulating the signal with Z x , a 
rephasing of the amplitude basis states. However, instead of 
applying this to |0), she modulates one share of an entangled 
state <& CA . To transmit the binary value x, Alice modulates 
C with the phase operator Z x and then sends A' via the noisy 
channel Af and C via a noiseless channel to Bob. The overall 
result is the state 

\<j x ) BCR = U^ BR (Z*f\<i>) A ' C , (4) 

= 75 E (-iri^) Sfl k) C , (5) 

zG{0,l} 
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where \tp z ) is a purification of cpf in (0. The relevant cq 
channel is then of the following form: 

Wp : x — > af c , (6) 

where the notation Wp indicates that the classical information 
is encoded into a phase variable. In contrast to W^, the 
channel Wp is one in which the receiver has quantum side 
information (in the form of system C) beyond what is transmit- 
ted by Af itself. Operationally, this quantum side information 
becomes available to Bob after he coherently decodes the 
amplitude variable. It does not correspond operationally to a 
Bell state shared before communication begins. 

Both cq channels in (O and ((6]) arise in the error analysis 
of our quantum polar coding scheme, in the sense that its 
performance depends on the performance of constituent polar 
codes constructed for these cq channels. Moreover, the two 
channels are more closely related than they may initially 
appear. To see their relationship, consider the "channel state" 

I jX ABCR l I — \A j \BCR 

xS{0,l} 

= 73 E \z) A \*f\<P z ) BR - (7) 

z6{0,l} 

Measuring system A in the phase basis \x) generates the Wp 
output state erf m me BC systems, while measuring A in 
the amplitude basis generates the \Na output tpf in the B 
system. 

Looking at the R system output of the amplitude basis 
measurement defines the cq channel Wp to the reservoir, 
pertaining to amplitude information in A: 

Wp : z -> <p*. 

The uncertainty principle of [3] then implies a relation be- 
tween amplitude information about A present in R and phase 
information about A present in BC. Indeed, due to the special 
form of \tp), namely, the coherent copy of the amplitude of A 
in system C, the following uncertainty relation holds J2], 0: 

H(Z A \R) i ,+H{X A \BC) i> = l, (8) 

where H(Z A \B)^ is the conditional von Neumann entropy 
of Z given B for the cq state ^ z \z) (z\ Z ® 0f (i.e., tp 
after measuring A in the amplitude basis), while H{X A \BC)^ 
is the conditional entropy of X given BC for the cq state 
i XL ffl (?\ X ® a x C 00 a f ter measuring A in the phase basis). 
For convenience, we reproduce the proof of (|8) in Lemma [10] 
of Appendix lAl 

Since the channel inputs are presumed to be uniform, the 
uncertainty relation in (0 immediately implies 

/(Wp) + /(W fi ) = l. (9) 

The more phase information goes to Bob, the less amplitude 
information goes to the reservoir R, and vice versa. In Sec- 
tion IVII-AI we will use this relationship to relate the quantum 
polar coding scheme presented in this article to that from prior 
work in J8). 



B. CQ Channels for Private Communication 

For the problem of private coding in the wiretap scenario, 
we must also specify the eavesdropper's output, not just the 
intended receiver's system B. In general, the eavesdropper 
(Eve) could have access to the reservoir R of Af in whole 
or in part. Thus, let us suppose that R can be divided into 
two subsystems, S and E, the latter being the output held by 
the eavesdropper. Clearly, S does not negatively impact the 
security of communication between Alice and Bob. Indeed, S 
functions as a sort of "shield" [15|, [2| protecting information 
in the honest parties' systems from leaking to E. 

In the above, we have also assumed that the sender inputs 
a pure state to Af, in either the amplitude or phase basis. To 
study the private coding problem in full generality, we relax 
this assumption and suppose that Alice prepends an additional 
cq channel AA to Af whose job is to create (make) a state p z 
from z: 

Pz ^M(\z) (z\). 
Altogether this defines the cq channel 

\N A : z->Af A '^ B oM A '(\z)(z\) = 6f. (10) 

The state p z admits a purification \g z ) S to an additional 
system S', which functions as an additional shield system. The 
purification is created by a Stinespring dilation Uf^ A s of 
AA applied to \z): 

\ e ,) A '* = u*r**\zf . (id 

The relevant phase channel is the same as before, with the 
exception that again Alice prepends AA to Af. The modulation 
now results in 

lUx) BCSS>E = izx) C u £^BSE u A>-+A>S> | $) CA' (U) 

= 7f E (-l) x '\*) O \0*) BSS ' E - (13) 

The relevant cq channel is given by 

Wp :x-> wf css ', (14) 

Again the two channels \Na and Wp are related — the 
corresponding channel state (as in (|7)) is now 

0> = A E \*) A \^) BCSS ' E d5) 

a;e{0,l} 

= 7f E \z) A \ z f\e z ) BSS ' E . (16) 

The amplitude channel to the eavesdropper, We is simply 
\Ne ■ z — > Of. Again the uncertainty relation in dH) applies; 
it states 

H(Z A \E)--+H(X A \BCSS')--=1. (17) 

The immediately translates into 

Z(W P ) + J(W E ) = 1. (18) 

For private communication, this relation states that "if the 
phase channel to Bob is nearly perfect, then the amplitude 
channel to Eve must be nearly useless and vice versa." 
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The above uncertainty relation then enables us to construct 
a reliable and strongly secure polar coding scheme for sending 
private classical data. As outlined in Section [VI- A| our scheme 
has the sender transmit private information bits through the 
synthesized channels (in the polar coding sense) that are 
nearly perfect in both amplitude and phase for Bob. The fact 
that these synthesized amplitude channels are nearly perfect 
guarantees that Bob will be able to recover these bits reliably. 
Meanwhile, the above uncertainty relation can be extended to 
the synthesized channels (see Lemma [TTJ and therefore the 
fact that the synthesized phase channels are nearly perfect 
for Bob guarantees that Eve will be able to recover only a 
negligibly small amount of information about the bits sent 
through them. 

Partitioning the synthesized channels according to amplitude 
and phase for Bob, rather than according to amplitude for 
Bob and amplitude for Eve as in |8), has the advantage 
that the scheme achieves the symmetric private information 
rate for all quantum wiretap channels. Moreover, we can 
prove that the secret key consumption rate vanishes for all 
degradable quantum channels, and we can furthermore provide 
an additional sufficient condition for when the secret key rate 
of the polar coding scheme vanishes. 

III. Polarization of Classical-Quantum Channels 

Wilde and Guha ifTTI demonstrated how to construct syn- 
thesized versions of any cq channel W, by channel combining 
and splitting [l]. For blocklength N — 2™, the synthesized 
channels are of the following form: 

W^rUi-^pgX**, d9) 

where 

i — l 

_ B N _ 1 ^ B N 

($ =&®~-®f%5> (22) 

and Gat is Ankan's encoding circuit matrix built from classical 
CNOT gates. The interpretation of this channel is that it is the 
one "seen" by the input Ui if all of the previous bits u 1 ^ 1 
are available and if we consider all the future bits uf +1 as 
randomized. This motivates the development of a quantum 
successive cancellation decoder (QSCD) IfTTI that attempts to 
distinguish ui = from Ui — 1 by adaptively exploiting the 
results of previous measurements and quantum hypothesis tests 
for each bit decision. 

The synthesized channels \N N polarize, in the sense that 
some become nearly perfect for classical data transmission 
while others become nearly useless. To prove this result, one 
can model the channel splitting and combining process as 
a random birth process JT], IfTTI . and one can demonstrate 
that the induced random birth processes corresponding to the 
channel parameters /(W^) and F(W^) are martingales that 
converge almost surely to zero-one valued random variables in 
the limit of many recursions. The following theorem from [11] 



(which uses the result in [22 |) characterizes the rate at which 
the channel polarization effect takes hold, and it is useful in 
proving statements about the performance of polar codes for 
cq channels: 

Theorem 1 (Wilde & Guha IfTTI '). For any binary input cq 
channel W, let W^n be the random variable characterizing 
the K th split channel and F{\N^ ) the fidelity of that channel, 
where n indicates the level of recursion for the encoding. Then, 
for any j3 < 1 /2, 

lim Pr{ J F 1 (W^f ) ) < 2" 2 "' 3 } = /(W). (23) 

Assuming knowledge of the good and bad channels, one can 
then construct a coding scheme based on the channel polar- 
ization effect, by dividing the synthesized channels according 
to the following polar coding rule: 

g N (W,(3) = [i e [N] : F(W«) < 2-"'}, 

B N (yt,p) = [N\\g N QN,p) (24) 

so that Gn(W, (3) is the set of "good" channels and Sjv(W, j3) 
is the set of "bad" channels. The sender then transmits the 
information bits through the good channels and "frozen" bits 
through the bad ones. A helpful assumption for error analysis 
is that the frozen bits are chosen uniformly at random such 
that the sender and receiver both have access to these frozen 
bits. An explicit construction of a QSCD that has an error 
probability scaling as o(2 _ 2 W ) was provided in IfTTI . Let 
{^uj^J} denote the corresponding decoding POVM, with ujrc 
the information bits and uj- the frozen bits. 

The algorithm of Tal and Vardy IfTTI efficiently determines 
which synthesized channels are good or bad (according to a 
fixed fidelity or error-probability criterion), but this algorithm 
is not known to work for channels with quantum output. 
Finding an efficient code construction in the quantum case 
is an open problem. 

IV. Simultaneous Polarization 

For our quantum polar coding scheme, we utilize a coherent 
version of Ankan's encoder f{Tj, meaning that the gates are 
quantum CNOT gates (this is the same encoder as in Q, ll8l). 
The private polar coding scheme can simply use classical 
CNOT gates. Classical, amplitude-basis coding through the 
iV-bit encoding circuit and N noisy channels results in an 

riiV 

output state f" N Q at the receiver, and the effect is to induce 

N (i) 

synthesized channels \N A N as described in the previous 
section. Theorem [JJ states that the fraction of amplitude-good 
channels (according to the criterion in (l24l ) is equal to I(\Na) 
or, equivalently, I(Z A ;B)^ using the channel state \ip) from 
(UJ. Again, Z A indicates that system A of is first measured 
in the amplitude basis. 

One of the main insights of Q is that the same encoding 
operation leads to channel polarization for the phase channel 
Wp as well. In the present context, suppose Alice modulates 
the C systems of the entangled states | $) with x , but 

then inputs the A' N systems to the coherent encoder before 
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sending them via the channel to Bob. The result is 



E (-D-* 



.B'^R" 



(25) 
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, B R 



Us 



and where Us denotes 
the polar encoder. Thus, the B N C N marginal state is simply 



T B C 



u, 



so that the coherent encoder also induces 

synthesized channels Wp^ using the encoding matrix G^ 
instead of Gat, modulo the additional Ug acting on C N . The 
fraction of phase-good channels is approximately equal to 
7(W P ) or equivalent^ l(X A ;BC)^,. 

Note that the classical side information for the Wp^ chan- 
nels is different from that in (fT~9l > because the direction of all 
CNOT gates is flipped due to the transpose of Gat when acting 
on phase variables. The change in the direction of the CNOT 
gates means that the i th synthesized phase channel Wp N is 
such that all of the future bits xn • ■ ■ are available to 
help in decoding bit Xi while all of the past bits Xi-\ ■ ■ ■ x\ 
are randomized. (This is the same as described in Q for Pauli 
channels.) 

For the case of private coding, we need only make one 
small modification. Instead of applying the encoding operation 
immediately prior to TV, we apply the encoding operation prior 
to Mo M.. Otherwise we proceed as before. 

V. Quantum Coding Scheme 

In this section we describe the quantum coding scheme 
in detail. First we consider the encoder and establish the 
achievable rate of the protocol in the limit of infinitely-large 
blocklength. Then we describe the decoder and show that the 
protocol produces approximate ebits of fidelity exponentially 
close to unity between sender and receiver, justifying the rate 
calculation of the first subsection. 

A. Encoder & Achievable Rates 

We divide the synthesized cq amplitude channels W^^y 
into sets Gn(\Na,I3) and Bn(W a , (3) according to d24l . and 
similarly, we divide the synthesized cq phase channels W p N 
into sets G N (\N P ,0) and B N {W P ,/3), where /3 < 1/2. The 
synthesized channels correspond to particular inputs to the 
encoding operation, and thus the set of all inputs divides into 
four groups: those that are good for both the amplitude and 
phase variable, those that are good for amplitude and bad for 
phase, bad for amplitude and good for phase, and those that 
are bad for both variables. We establish notation for these 
channels as follows: 

A = G N (\N A ,P) n Gn(Wp,(3), 

x = g N (\N A ,p) n B N (\N P ,p) 

Z = B N (W A ,f3) n MWp,/3), 
B = B N (W A ,f3) n B N (\N P ,(3). 



Our quantum polar coding scheme has the sender transmit 
information qubits through the inputs in A, frozen bits in 
the phase basis through the inputs in X, frozen bits in the 
amplitude basis through the inputs in Z, and halves of ebits 
shared with Bob through the inputs in B (we can think of 
these in some sense as being frozen simultaneously in both 
the amplitude and phase basis). 

Thus, our coding procedure is entanglement-assisted [18|. 
Indeed, the encoder implicitly results in an entanglement- 
assisted Calderbank-Shor-Steane (CSS) code, as pointed out 
in Q. In the stabilizer language of quantum error-correcting 
codes, the values of the frozen inputs determine the vari- 
ous stabilizers of the code, and due to the dual nature of 
the encoding circuit (polarizing both amplitude and phase 
inputs), frozen amplitude states become Z-type stabilizers and 
frozen phase states become X-type stabilizers. The need for 
entangled inputs signals that the CSS code is entanglement- 
assisted. As some inputs require both frozen amplitude and 
phase values, the resulting stabilizer code would need both 
the corresponding X- and Z-type stabilizers. These, however, 
do not commute, and the role of entanglement-assistance is to 
"enlarge" the stabilizers to additional systems on Bob's side 
such that they do commute. In spite of the fact that our quan- 
tum polar coding scheme results in a CSS code, the decod- 
ing procedure (quantum successive cancellation decoding) is 
very different from the standard stabilizer recovery procedure 
in which the receiver performs stabilizer measurements and 
classical post processing of syndromes. 

The net rate of the protocol for blocklength N is simply 
tq{N) = I — jj— ■ ■ Upon suitable choice of amplitude basis, it 
equals the symmetric coherent information in the asymptotic 
limit: 

Theorem 2. limjv^oo r Q (N) = I Bym (Af). 
Proof: From Theorem Q] it follows that 
1 



lim -\g N (\N A ,(3)\ =1 (Z A ;B )^ and 
lim ±\g N (W P ,p)\ =I(X A ;BC)^. 
From basic set theory we have 

=\G N (W A ,P)\ + \G N (\N P ,f3)\ 

- \g N (w A ,/3) u g N QN P ,p)\, 

as well as 

\g N (\N A ,p) U g N QN P ,P)\=N-\B\. 
Thus, the rate of the scheme is equal to 

\A\-\B\-t,*A. \ , rf V A. 



(26) 
(27) 



lim 

Af->oo N 



= l(Z A ;B) lP + l(X A ;BC), p -l (28) 

= l{Z A \ B)ip — l(Z A ; i?)^, 
= H{B) i> -H(B\Z A )^ 

-[H(R) lp -H(R\Z A )^] 
= H(B)^, — H{R) 1 p 
= H(B) T - H(AB) T . 
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Here the second equality uses The third equality is an 
identity, and the fourth follows from the fact that the state on 
BR is pure when conditioned on a measurement outcome of 

A, so that H(B\Z A ) i , = H(R\Z A )^. The final equality uses 
the fact that the entropy expressions are equal when evaluated 
for the state t ab = N A '^ B {<S> AA '). ■ 

B. Decoder and Error Analysis 

We now describe the decoder in more detail and demon- 
strate that the fidelity of the entire coding scheme becomes 
exponentially close to one as the blocklength gets large. In 
particular, we will show 

Theorem 3. Given any quantum channel with a qubit in- 
put system and a finite- dimensional output system, for large 
enough blocksize N, there exists a quantum polar coding 
scheme which generates approximate ebits that are o(2~i N? )- 
close in trace distance to exact ebits for j3 < ^ji. Furthemore, 
the rate of this scheme is equal to the symmetric coherent 
information of the channel. 



Proof: The sender and receiver begin with the following 



state: 



|tf )=jV Y \ u a)\ua)\uz)\ux)\u b ) <8 M, 



where Alice po ssesses t he first five registers, Bob the last oneJl 
and Nq = 1/ V^W+W. We also assume for now that the bits 
in uz and ux are chosen uniformly at random and are known 
to both the sender and receiver. Note that the fourth register is 
expressed in the phase basis; using the amplitude basis instead 
gives 

|*o) = N x Y {-1) Ux ' Vx \ua)\ua)\uz)\v x )\u b ) ® \u B ), 



where Ni = l/y/2\ A \+\ B \+\ x \. The sender then feeds the 
middle four registers through the polar encoder and channel, 
leading to a state of the following form: 



l*l> = JVl Y (~ 1 T X ' VX \ U A) ® \<Pu A ,uz,v x ,u B ) 



B R 



\ub), 



where \<p UA ,u z ,v x ,u B ) = UjOr U £ \u A )\u z )\vx)\u B ) 

(abusing notation, the encoding operation Gn is left implicit). 

Observe that, conditioned on amplitude measurements of 
\ux) and \ub), the B N subsystem is identical to the polar- 
encoded output of W^. Thus, the first step of the decoder is 
the following coherent implementation of the QSCD for the 
amplitude channel 



Va=Y V A '^" Z) ® MK) ® \u B )\u B ){u B \ ® \u z ). 

U A ,U B ,Vx 

(29) 

The idea here is that the decoder coherently recovers the bits 
in u_a and vx, using uz and u B as classical and quantum 

2 In quantum information theory the tensor product symbol is often used 
implicitly. Our convention in this section is to leave it implicit for systems 
belonging to the same party and use it explicitly to denote a division between 
two parties. 



side information, respectively. Appendix IClprovides a detailed 
argument that the state resulting from this first decoding step 
is o(2~2 N )-close in expected trace distance to the following 
ideal state: 



|* 2 ) = N : 



E 

u A ,ub,vx 



\ua)\vx)\u b )\u b )\uz), (30) 



where the expectation is with respect to the uniformly random 
choice of Ux- Thus, Bob has coherently recovered the bits 
ua and vx with the decoder in (|29l , while making a second 
coherent and incoherent copy of the bits u B and uz, respec- 
tively. 

The next step in the process is to make coherent use of the 
Wp decoder. For this to be useful, however, we must show 
that encoded versions of \o x ) BCE ' , as in ( f25l l. are present in 
I ^2)- To see this, first observe that we can write 



1*2 



N, 



E 

u a ,ub,v x . 

X A ,X B 



(-1) 



UX -VX+X A -U A +XB-'UB 



u A .uz -vx -UB / 



\UA)\Vx)\U B )\X B )\Uz) 



where N 2 = l/\/2 2 \ A \+' 2 \ B \+\ x \, by expressing the first 
register and the second \u B ) register in the phase basis. This 
is nearly the expression we are looking for, as all the desired 
phase factors are present, except one corresponding to \uz)- 
As uz is chosen at random, we can describe it quantum- 
mechanically as arising from part of an entangled state. The 
other part is shared by Alice and an inaccessible reference 
system. Including this purification degree of freedom, 1*2) 
becomes 



|*2> = ^3 



E < 

UA,UB,vx, 
u z ,x A ,x B 

1» r JV , 



■1) 



ux-Vx+x a -u a +x b -ub 



\ ( Pu a ,u z ,vx,ub) B E \UA)\VX)\U B )\X B )\U Z ) 



Xa}® 



where A^3 = A^/VS^i". Again utilizing the phase basis gives 

K'V: Y,. > (_iyx-vx+x A -u A +XB-UB+x z -u z \~ A ^ 



• 2 = -v-i Y 

u A ,u B ,v x ,u z , 



X A ,XB-X Z 



U A ,U Z ,V X ,U B / 



\ua)\vx)\u b )\x b )\uz) 



Thus, 1^2) is a superposition of polar encoded states as in > 
and therefore the phase decoder will be useful to the receiver. 
In particular, Bob can first apply U £ and then coherently 
apply the QSCD for the phase channel Wp, 



V P = 



^(x B ,u x ) 



\x A )\x z )\ux) <8> \x B )(x B \ (31) 



to coherently extract the values of x A and xz using the 
frozen bits x B and ux- He then applies (7g to restore the 
C N registers to their previous form. As with the amplitude 
decoding step, a similar argument (detailed in Appendix [D} 
ensures the closeness of the output of this process to the 
ideal output as governed by the error probability of the Wp 
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decoder. To express the ideal output succinctly, we first make 
the assignments 




Rewriting phase terms with Pauli operators, we then have that 
the actual output of this step of the decoder is o(2~ 2 N )-close 
in expected trace distance to the following ideal state: 



1*3) = n 4 \ x *) ® M i u *> m 

'E^Cfc \*a) \*z) \*x) 1%) ® \xz) , 

(32) 



where A 4 = 1/ V2MHB|+Tz| . Here Z x *' xz > Ux > XB is short- 
hand for Z XA ® Z* 2 ® ® Z 18 , which acts on the second 
qubits in the entangled pairs, while the encoding and channel 
unitaries act on the first. 

The final step in the decoding process is to remove (or 
"decouple") the phase operator Z XA,Xz,Vx,XB by controlled 
operations from the registers \x A ) \xz) \ux) \xb) to the sec- 
ond qubits in the entangled pairs. This phase-basis controlled 
phase operation is equivalent to N CNOT operations from the 
latter systems to the former and results in 



No^2\x A ) 



\xa) U% n U £ \$ a ,z, X ,b) \ Ux ) \*b) > 



with Bob sharing l/V2\ z \ J2 Xz \xz) ® \xz) with the inacces- 
sible reference. Thus, applying the triangle inequality for trace 
distance, the protocol finishes with Alice and Bob sharing a 
state close in trace distance to the following state: 



1 



£|5U> 



\XA) 



That is, the sender and receiver generate \ A\ approximate ebits 
with trace distance less than o(2~^ Nf> ) to ideal ebits at the 
end of the protocol. ■ 

Remark 4. The above scheme performs well with respect to a 
uniformly random choice of the bits ux and uz, in the sense 
that the expectation of the fidelity is high. However, Markov's 
inequality implies that a large fraction of the possible codes 
have good performance. 

Remark 5. The first step of the decoder is identical to the first 
step of the decoder from [$]. Though, the second step above 
is an improvement over the second step in [8] because it is an 
explicit coherent QSCD, rather than an inexplicit controlled- 
decoupling unitary. Additionally, the decoder's complexity 
is equivalent to 0{N) quantum hypothesis tests and other 
unitaries resulting from the polar decompositions of Aua,'vx^ 
and T^^'xz , but it remains unclear how to implement these 
efficiently. 



VI. Private Coding Scheme 

The private coding scheme is a slight variation of the quan- 
tum coding scheme and makes use of the fact that the quantum 
encoder is based on a CSS code. Indeed, one can reduce the 
quantum case to a classical protocol, as was first demonstrated 
by Shor and Preskill lfl9l . Renes et al. [7| point out that this 
reduction applies to quantum polar codes, being CSS codes. 
Here we shall follow a more direct route by defining and 
analyzing the private coding procedure independently of the 
quantum protocol. 

A. Encoder & Achievable Rates 

As before, we divide the encoder inputs into four groups 

A = G N (W A ,f3) n Q N (W P ,0), 

x = g N (w A ,/3) n B N (Wp,p), 

Z = B N (W A ,(3) n Siv(Wp,/3), 
B = B N (W A ,(3) n B N (\N P ,p). 

Unlike the quantum coding scheme, all inputs are now made in 
the amplitude basis. The sender again inputs information bits 
to A and frozen bits into Z. Now the sender mimics frozen 
phase inputs to X with random bits and mimics halves of 
ebits input to B with secret key bits. Thus, our private coding 
procedure is generally secret-key assisted. Its rate is simply 
rp(N) — ^ . It equals the symmetric private information 

in the asymptotic limit: 



Theorem 6. lim 



N- 



,r P (N)=P sym {N). 



Proof: The proof is entirely similar to the proof of 
Theorem 121 with the exception that we choose M. to create the 
optimal states p z in the symmetric private information. Then 
we use 

1 



lim ^\Gn{Wa,P)\ =I(Z a ;B) Ji 



JV-s-oo 

1 



(33) 
(34) 



^^IMW^I =I(X A ;BCSS%, 

and appeal to < TT~8T > instead of {9). ■ 
We should stress that our consideration of the phase chan- 
nels in this part of the paper is only necessary in order to 
compute the index sets A, X, Z, and B. The decoder in 
the next section does not make explicit use of these phase 
channels — they only arise in our security analysis, where we 
appeal to the uncertainty relation in (JTvJ in order to guarantee 
security of the scheme. This is in contrast to the quantum polar 
coding scheme of the previous sections, in which the decoder 
makes explicit use of the phase channels. 

B. Decoder & Reliability and Security Analysis 

We now describe the decoder and examine the reliability 
and security of the resulting protocol. Our approach leads to 
strong security, as stated in the following theorem: 

Theorem 7. For sufficiently large N, the private polar coding 
scheme given above satisfies the following reliability and 
security criteria: 
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1) Pt{U c ^ U c } < o(2~i Np y forC = AUX,and 

2) I(U A ;E N )<o(2-i Nf, \ 

Proof: First, it is straightforward to prove that the code 
has good reliability, by appealing to the results from [11 J. That 
is, there exists a POVM {Aj^^ }> tne quantum successive 
cancellation decoder, such that 

Pv{Ue ± U C } < te^W^) (35) 

= o(2-^). (36) 

where C = A(J X. The QSCD operates exactly as in ifTTI . 
treating ZUBas the frozen set and decoding all bits in the 
set A U X, though of course only the bits in A contain the 
transmitted message. This decoder has an efficient implemen- 
tation if the channel to Bob is classical U. This is the case 
for the amplitude damping channel, the erasure channel, and 
any Pauli channel, for example. 

We now prove that strong security, in the sense of ||20l , 
holds for our polar coding scheme. Consider that 

I{U A -E N )=Y^I(U 1 ,E N \U A -) 

ieA 

= J2l(Uf,E"U A -) 

ieA 

K^liU^Ut 1 ) 
ieA 

ieA 

The first equality is from the chain rule for quantum mutual 
information and by defining AJ to be the indices in A 
preceding i. The second equality follows from the assumption 
that the bits in U A - are chosen uniformly at random. The 
first inequality is from quantum data processing. The third 
equality is from the definition of the synthesized channels 
N . Continuing, we have 

ieA 

ieA 

ieA 
ieA 



The first inequality is from [11 Proposition 1]. The second 
holds since the two synthesized channels obey an uncertainty 
relation, shown in Lemma Q~T] which then gives a fidelity 

uncertainty relation, shown in Lemma [12] Here we set Wi = 

(i) u) 

Wp N and W 2 = W B N in the latter lemma. The fourth 
inequality follows from the definition of the set A. ■ 



A clear advantage of the current approach over the previous 
construction from [8 | is that Theorem Q] directly applies to 
the phase-good channels with the "goodness criterion" given 
by (1241) . Only the amplitude channels to Eve (rather than 
the phase-good channels to Bob) were considered in ||8), 
and it seemed only possible to prove polarization results for 
quantum wiretap channels in which the amplitude channel to 
Eve is classical. Our approach here overcomes this difficulty 
by appealing to Theorem Q] directly for polarization and later 
relating the phase channels to Bob and the amplitude channels 
to Eve via an uncertainty relation. 

VII. Entanglement & Secret-Key Assistance Are 
Not Always Needed 

In this section we give two different conditions for when the 
quantum or private coding schemes require only a sublinear 
amount of entanglement or secret-key assistance. The first oc- 
curs when the channel is degradable lETl . in the sense that the 
R output (Eve's output E in the private case) can be generated 
from Bob's output B by some quantum operation. The second 
stems from properties of the binary erasure channel (BEC) as 
an "extreme point" in the channel synthesis process. 

A. Degradable Channels 

Suppose that the channel Af is degradable in the sense that 
the R output ipf can be generated from the B output ipf by 
some other quantum channel T>: ipf = T>(ipf). Similarly, in 
the private coding scenario, suppose that gf = T>(gf). Then 
we can show 

Theorem 8. For degradable channels in the quantum or 
private coding scenearios as described above, the rate of 
entanglement or secret key assistance, respectively, vanishes 
in the limit of large blocklength: 

lim i|S|=0. (37) 

We provide a brief summary of the proof and then follow 
with more detail. First, the channel uncertainty relation (0 can 
be extended to synthesized channels (as the inequality given 
in Lemma [Till and implies that phase-good channels (output 
fidelity near zero) to Bob are amplitude-"very bad" channels to 
R (output fidelity near one). From degradability, we also know 
that the doubly-bad channels B are amplitude-bad channels to 
R. These two observations imply that the doubly-bad channels 
to Bob, the phase-good channels to Bob, and amplitude-good 
channels to R are disjoint sets. The sum of the fractional sizes 
of the latter two sets equals l(X A \ BC)^ + l(Z A ; R),p = 1 
by ([8]l, implying that the rate of the doubly-bad channel set 
B (the entanglement consumption rate) approaches zero in the 
same limit. Replaying the argument for the channels in the 
private communication scenario gives the same result. 

Proof: The proof is a modification of the argument in [8 1, 
which in turn came from ||20l . First observe that following 
three sets of channels are disjoint: the doubly bad channels B, 
the amplitude-good channels to R, GnC^r, an d the phase- 
good channels to Bob, Q^(\Np, /3). Clearly the first and last 
are disjoint by the definition of B. The first two are disjoint 
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by the degradability condition: any channel amplitude-bad for 
Bob must also be amplitude-bad for R. Formally, the output 
fidelity can only go down under the degrading map; see ||8] 
Lemma 3]. Finally, that the second two are disjoint follows 
from the fidelity uncertainty relations in Lemma Q~2] Setting 
Wi = W^jy and W 2 = therein, the lemma states that 

the fidelities of Wp ff and \N^ N cannot both be small: 

2 ■ 2- N * > 2 ■ F{\N ( p ] N ) > 1 - F(\N { * ] N ). (38) 
This implies 

F(Wr,n)> 1-2-2"^, (39) 

whenever 2~ Nf> > F(W PN ). Thus, all of the channels that are 
phase-good for Bob are amplitude-"very bad" for R. Therefore 
the following relation holds for large enough N: 

g N {w P ,P)ng N 0N R ,j3) = fr (40) 

Since these three sets are disjoint, the sum of their sizes 
cannot exceed N, the total number of channels: 

^(\Gn(W r ,P)\ + \g N QN P ,P)\ + \B\) < 1. (41) 

Finally, we know from Theorem Q] that the rates of the sets 
Gn (Wr, (3) and 0n(Wp, j3i) in the asymptotic limit are 

lim hg N (W R ,/3)\ =l(Z A ;R) i>1 

iv— >-oo iv 

lim ±-\g N (W P ,P)\ = l(X A ] BC) i , = 1 - l(Z A ;R) il , 

so that the rate of B must be zero in the asymptotic limit. ■ 
Note that in the limit N — > oo, the channels polarize, so 
that the channels which are good in phase for Bob are bad in 
amplitude for R, and the ones which are good in amplitude 
for R are bad in phase for Bob. This demonstrates that our 
quantum polar coding scheme given here is asymptotically 
equivalent to the scheme of Wilde and Guha [ 8 ] in the limit of 
many recursions of the encoding after the channel polarization 
effect takes hold. Thus, this same argument implies that the 
entanglement consumption rate for the quantum polar codes 
in (8) vanishes for general degradable quantum channels 
because the rate of the phase-good channels to Bob is a lower 
bound on the rate of the amplitude-"very bad" channels to R. 

B. General Condition Based on Erasure Channels 

The binary erasure channel (BEC) plays a special role in 
the channel synthesis process. Suppose we have an arbitrary 
channel W with output fidelity Fq. Then, the i th channel 
synthesized from the BEC with fidelity Fq is always less 
reliable than the corresponding i lh channel synthesized from 
W. This is due to the fact that, among all channels with a 
fixed symmetric capacity, the BEC with that capacity has the 
smallest output fidelity. This was shown for classical channels 
in HI Proposition 11], and the same argument works in the 
quantum case using (21) and (22) of IfTTII instead of (34) 
and (35) of (TJ. Thus, if the i th synthesized BEC channel is 
good, then surely the i th synthesized W is also. From this 
observation, [7| gave a condition under which entanglement 



assistance is needed only at a sub linear rate. Here we show that 
the same condition holds in the more general setting discussed 
in this paper. 

Theorem 9. In the quantum and private coding schemes 
above, limjv_ i . 00 jj\B\ =0 if 

F(\N A ) + F(W F ) < 1. (42) 

We first provide a heuristic proof sketch which clarifies the 
main idea behind the proof, and then we follow with the full 
proof. Since the encoder applies the transformation Gn for the 
amplitude channel but G N for the phase channel, an input i 
corresponds to a doubly-bad synthesized channel if the i th syn- 
thesized amplitude channel is bad and the (N— i) th synthesized 
phase channel is bad. For a given input or synthesized channel 
i, call N — i the complementary-variable channel. 

Letting Ff be the output fidelity of the i th channel synthe- 
sized from the BEC with erasure probability p, the proof rests 
on the fact that 

F£_ i = l-^- p . (43) 

Since Ff > Ff for p' > p, this relation implies that, for 
p < x ji the complement of a bad channel is a good channel, 
while for p > x ji the complement of a good channel is a bad 
channel. Note that p itself is the output fidelity of the BEC 
with erasure probability p. 

Now suppose the two channels and Wp are erasure 
channels with erasure probabilities pa and pp, respectively, 
such that pa < pp < V 2 - Thus they satisfy the stated 
constraint. Indeed, we need only check that no doubly bad 
channels occur for the case pa — pp, since then they certainly 
will not occur when one of the erasure probabilities is smaller 
and some inputs switch from bad to good. Now, if i is a bad 
input for Wp, the complementary-variable input is good, and 
therefore i must be a good input to \Na- Similarly, a bad 
input for must be a good input to Wp and so indeed 
no doubly-bad inputs can occur in this case. On the other 
hand, this line of argumentation fails when one or other of the 
erasure probabilities is greater than 1 /2. 

Finally, since the BEC is the worst case under channel 
synthesis among all base channels with a given output fidelity, 
the stated condition holds for all channels. 

Proof: As described in Section HID one can prove that 
channel polarization takes hold by considering the channel 
splitting and combining process as a random birth process 
{W„ : n > 0} (with the channel choice determined by an iid 
Bernoulli process {B n : n > 1} and setting Wo = W). One 
can then consider the induced birth process for the fidelity 
parameter 

{F n : n > 0} = {F(W„) : n > 0}. 

In l22l it is shown that the following extremal process 
{F^ : n > 0} bounds the actual channel process {F n : n > 0}: 

F , f F n 2 if B n = 
n+1 \ 2F^ - Ff^ if B n = l ' 
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a relation which can be written more symmetrically as 

K+i^F'n if B n = 0, 

1 - = (1 - F^) 2 if S n = l. (44) 

Note that the extremal process is based on the process for 
a BEC with the same initial fidelity Fq. From now on, we 
make abbreviations such as {F„} — {F n : n > 0} in order to 
simplify the notation. The extremality of the process is based 
on recursive relations for the synthesized channel fidelities, 
equations (34) and (35) of (TJ. These have been extended to 
the case the channel has quantum outputs as equations (21) 
and (22) of ifTTl . Therefore, the results derived in ll22l hold in 
the present setting as well. 

In particular, the extremal process above has the nice 
property [22, Observation 4 (ii)] that for every realization {b n } 
of the process {B n } (and thus for every realization {f n } of 
{F n }) there exists a particular initial threshold value F^ ({&„}) 
such that either 

lim /; = if fi < f;({6„}), 

71— >OC 

or 

lim /; = 1 if -Fq > F t ' h ({6„})- 

71— ^OO 

(Note that Fq is deterministic and is the initial value of the 
process.) 

We can denote the respective fidelity processes for the 
amplitude and phase channels in our coding scheme as { F r f } 
and {F„ } and the respective random birth processes as 
{B£} and {B p }. Also, let {F,f } and {F,f } denote the 
corresponding extremal processes. The important observation 
made in [7| is that the process {F,f} makes the opposite 
choice of channel at each step of the birth process because 
the phase encoder is the reverse of the amplitude encoder. 
That is, it holds for every n and for every realization {b^} 
and {b p } that 

Thus, we can write B p = 1 — S„, so that B p is completely 
determined by B A . The extremal amplitude channel process 
{Fj^'I is already of the form in (04), and we can consider 
the extremal phase process as {l — F p '} in order for it to 
have this same form. Thus, a realization {f^ } of the extremal 
amplitude channel process {F^'} converges to one if 

f a ' > 

and a realization {1 — f p } of the extremal phase process 
{ 1 — F PI } converges to zero if 

1-F P '<F^}), 

implying that {fn'} converges to one if 

f,t>i-f;({^}). 

Thus, the sum process {F^' + F p '} converges to two if 

F A ' + F P ' > + 1 - K({b A }) 

= 1. (45) 



The above bound is a universal, sufficient lower bound for the 
sum process to converge to two, that holds regardless of the 
threshold value F t ' h ({&^}) for a particular realization {b A }. 
It follows that a given realization {/„ + f p } of the actual 
sum process {f£ + F p } can onrv converge to two when (f45b 
holds because we set F A — F A and the extremal process 
bounds the actual process (note that some realizations might 
converge to one or zero as well). If a realization {/^ + f p \ 
of the sum process { F 7 f + F p } converges to two, then this 
implies that the set B is non-empty, i.e., the code will require 
some preshared entanglement or secret key. So, if the condition 
in the statement of the theorem holds, no realization of the sum 
process can ever converge to two, and the code will not require 
any secret key bits. ■ 
The above argument only holds in the asymptotic limit 
of many recursions of the encoding such that the channel 
polarization effect takes hold (where all synthesized channels 
are polarized to be completely perfect or useless). That is, the 
argument does not apply whenever there is a finite number 
of recursions — in this case, if the number of recursions is 
large enough, then a large fraction of synthesized channels 
polarize according to some tolerance, but there is always a 
small fraction that have not polarized. Thus, we can only 
conclude that the above proof applies in the limit of many 
recursions and that the rate of secret key consumption vanishes 
in this limit. 

VIII. SUPERACTIVATION 

Our quantum polar coding scheme can be adapted to realize 
the superactivation effect, in which two zero-capacity quantum 
channels can activate each other when used jointly, such 
that the joint channel has a non-zero quantum capacity |10|. 
Recall that the channels from [ 1 1 are a four-dimensional PPT 
channel and a four-dimensional 50% erasure channel. Each of 
these have zero quantum capacity, but the joint tensor-product 
channel has non-zero capacity^] 

We now discuss how to realize a quantum polar coding 
scheme for the joint channel. Observe that the input space 
of the joint channel is 16-dimensional and thus has a de- 
composition as a tensor product of four qubit-input spaces: 
C 4 ® C 4 ~ C 16 ~ C 2 ® C 2 ® C 2 ® C 2 . Thus, we can exploit a 
slightly modified version of our qubit polar coding scheme. 
Following [9 1, the idea is for Alice and Bob to employ a 
quantum polar code for each qubit in the tensor factor. Let 
Z\, . . . , Z± denote the amplitude variables of these qubits and 
let Xi, . . . , Xi denote the phase variables. Bob's decoder is 
such that he coherently decodes Z\, uses it as quantum side 
information (QSI) to decode Z<z, uses both Z\ and Z2 as QSI 
to decode Z3, and then uses all of Z\, . . . , Z3 to help decode 
Z4. With all of the amplitude variables decoded, Bob then uses 
these as QSI to decode X\, and continues successively until 

3 We are speaking of catalytic superactivation. A catalytic protocol uses 
entanglement assistance, but the figure of merit is the net rate of quantum 
communication — the total quantum communication rate minus the entangle- 
ment consumption rate. Note that the catalytic quantum capacity is equal to 
zero if the standard quantum capacity is zero. Thus, the superactivation effect 
that we speak of in this section is for the catalytic quantum capacity. 
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he coherently decodes X4. At the end he performs controlled 
phase gates to recover entanglement established with Alice. 

We now calculate the total rate of this scheme. For the 
first qubit space in the tensor factor, the channels split up 
into four types depending on whether they are good/bad for 
amplitude/phase. Using the formula ( |28l i, the net quantum data 
rate for the first tensor factor is equal to 

I(Z 1 ;B)+I(X 1 ;BZ 1 Z 2 Z 3 Z 4 )-l. 

(The formula is slightly different here because Bob decodes 
the phase variable X\ with all of the amplitude variables as 
QSI.) For the second qubit space in the tensor factor, the net 
quantum data rate is 

I(Z 2 ;BZ 1 ) + I{X 2 :BZ 1 Z 2 Z 3 Z 4 X 1 ) - 1. 

We can similarly determine the respective net quantum data 
rates for the third and fourth qubit spaces as 

I{Z 3 ] BZiZ 2 ) + I(X 3 ; BZ\Z 2 Z 3 Z 4 X\X 2 ) — 1, 
I(Z 4 \ BZ\Z 2 Z 3 ) + I(X 4 ; BZ\Z 2 Z 3 Z 4 X\X 2 X 3 ) — 1. 

Summing all these rates together with the chain rule and 
using the fact that any two amplitude and/or phase variables 
are independent whenever i ^ j, we obtain the overall net 
quantum data rate: 

I(Z 1 Z 2 Z 3 Z i ; B) + I(X 1 X 2 X 3 X 4 ; BZ 1 Z 2 Z 3 Z 4 ) - 4, 

which is equal to the coherent information of the joint channel 
(as in the proof of Theorem The fact that our quantum 
polar code can achieve the symmetric coherent information 
rate then proves that superactivation occurs, given that Smith 
and Yard already showed that this rate is non-zero for the 
channels mentioned above ifTUl . 

IX. Conclusion 

We have demonstrated new polar coding schemes for quan- 
tum or private communication which achieve high rates for 
arbitrary quantum channels, unlike the constructions in JS), 
0. The encoding operations are efficient, though currently 
no efficient algorithm to construct the code itself. (That 
is, for general quantum channels, no efficient algorithm is 
known for determining which inputs correspond to good or 
bad synthesized channels.) For the decoder the situation is 
somewhat reversed: Given the code construction, the decoder 
is explicit — it is based on the quantum successive cancellation 
method of ifTTI — but no efficient implementation is known. 

Finding an efficient code construction algorithm and an ef- 
ficient successive cancellation decoder are the main questions 
left open in this work. It would be interesting to determine 
conditions beyond those of Section I VIII under which entan- 
glement or secret-key assistance are not needed or to find an 
argument ensuring reliability and strong security of the private 
coding scheme which relies only on the "amplitude" properties 
of the wiretap channel. 
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Appendix A 
Useful Lemmas 

Lemma 10 (Renes & Boileau |[3)). The following uncertainty 
relation holds 



H(Z A \R)^ + H(X A \BC)^ = 1, 



(46) 



where 



\ip) ABCR = ^2VP^\ Z ) A \ Z ) t'-. 



BR 



Proof: Rewriting system A of i/j using the conjugate basis 



gives 



, ABCR 



BR 



W2 
,A 



= 72El 5? ) A (^) C ^') 



x\G \„I,I\ CBR 



(47) 



(48) 



where 



nCBR 



, BR 



To compute H{X A \BC)^ first write it as 

H(X A \BC), 4 , = H{X A )^ + H{BC\X J 



H(BC\ 



whose terms are easier to evaluate. The first is simply 
H(X A ),p = 1, while the second is just 

H(BC\X A )^ = H{CB) 4 , = H{R)v = H{R) i , 

since the two marginal states of BC given X A are unitarily- 
related and one of the marginals is ip' CB . Since ijj' CBR is 
pure, H(CB)^> = H(R)^> and a quick calculation reveals 
that H{R)^i = H(R) x p. Meanwhile, the BC marginal is 

ip BC = Y,z Pz \z) (zf ® tpf, and so 

H{CB)^ = H(Z%, + P*H(<pf) (49) 

Z 

= H(Z A ) 4 ,+Y,PzH(^) (50) 

Z 

= H(Z A R)^, (51) 

using the entropic properties of bipartite pure states. Thus, 

H{X A \BC)^ = 1 + H(R)^ -H{Z A R) i> (52) 
= l-H(Z A \R)^. (53) 



Lemma 11. The synthesized channels Wp^ and obey 



J(wg^) + J(w£V)<i 



(54) 



The same relation holds when replacing Wp N and W^' N with 
Wpjy and N , respectively. 

ABCR 

Proof: Consider N copies of the channel state 
in (Q where the B systems are first subjected to the polariza- 
tion transformation before input to the channel: 



\ z N r \z"r \<p*»g„y 
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Then let f ff be the state after measuring the sys- 
tems A\ ■ ■ ■ Ai-i in the amplitude basis and the systems 
Ai + i ■ ■ ■ An in the phase basis, indicating the various mea- 
surement output systems as Z\,... and Xj+i, . . . , Xm 
so that it is clear these systems become classical. From ^ N 
one can simultaneously generate the outputs of the i th phase 
channel to Bob, Wp S and the i th amplitude channel to 
the reservoir R, just as in the simple case of |£) in Section ITT1 
In particular, ^ N is a tripartite state on 

A^B" C N X? +1 \R N Z\~\ 

where the vertical bars indicate the divisions of the parties. 
Applying the uncertainty principle from [3 1 gives 

H(X Ai \B N C N X» +1 )^ N +H(Z a >\R n ZI%, n > 1 (55) 

Combining this with H(X A >) + H{Z M ) = 2, which holds 
because X Ai and Z Ai are uniform random bits, yields 

i(x a -b n c n x^ +1 ) Wn +i(z a -r n z[- 1 ) Wn < 1, 

or equivalently, 



*) + W<i. 



(56) 



The same argument applies starting from N copies of the 
channel state \t/j) from (fT5T l. ■ 

Lemma 12. For complementary binary-input channels Wi 
and W 2 obeying the uncertainty relation I{\N\) +7(W2) < 1, 

2F(Wi) + F(W 2 ) > 1, and (57) 
F(Wi) + 2F(W 2 ) > 1. (58) 

Proof: Start with the following inequality for binary-input 
channels W [11 Proposition 1]: 



7(W) > log 2 



(59) 



l + F(\N) / 

This is equivalent to F(W) > 2 1 ~ 7 ( vv ) - 1. Then we have 

F(Wi) > 2 w(Wl) - 1 (60) 
> 2 J(W a ) _ 1 (61) 

* TT^y - x < (62) 

where we used the uncertainty relation in the second step. 
Rewriting this, we obtain 

(l + F(W 2 ))F(Wi) >2-(l + F(W 2 )). (63) 

Since the fidelity is less than unity, this gives the first inequal- 
ity. Interchanging the two channels and repeating the argument 
gives the second. ■ 

Appendix B 

Classical Wiretap Channels as Quantum Wiretap 
Channels 

Suppose that p(y,z\x) is a classical wiretap channel such 
that x is the input and y and z are the outputs for the legitimate 
receiver and the wiretapper, respectively. Then we can embed 
the random variables X, Y, and Z into quantum systems, so 



that the resulting wiretap channel has the following action on 
an arbitrary input state p: 



A'^BE 



(P) 



x,y,z 



'x\p\x)p(y,z\x)\y)(y\ B ®\z)(z\ E . (64) 



The physical interpretation of the above channel is that it first 
measures the input system in the orthonormal basis {|x)(x|} 
(ensuring that the input is effectively classical) and prepares 
the classical states \y) B and \z) E for Bob and Eve with 
probability p(y, z\x). One can check that the Rraus operators 
lfl2ll for this classical channel are 

{Vp\^\xj(\y) B ®\z) E )(x\ A '} x , y , z . 

Thus, by a standard construction 0121 . an isometric extension 
of this classical wiretap channel acts as follows on a pure state 
input I ip): 



U 



A'^BES 2U ,\A' 



Nc 



E 

x,y,z 



w 

Vp(y, z \ x ) 



A' 1 \ B 



z) \x,y,z) 



S-2 



so that tracing over system S* 2 recovers the action of the 
original channel in (l64l . 

Appendix C 
Detailed Error Analysis for the Coherent 
Amplitude Decoder 



We provide details of the error analysis in Section IV-Bl for 
the first decoding step, in which Bob coherently recovers the 
amplitude information. Given the frozen bits ux and uz, the 
ideal state after the first step of the decoder is given in (l30l 
and for convenience, again in (165 1 . Applying the coherent 
amplitude measurement Va in ( 1291 actually results in (1661 . 
Computing their overlap results in (l67t . Next, we take the 
expectation of their overlap with respect to the uniformly 
random choice of the frozen bits ux and uz- This leads 
to the steps in d68l)-(l72b, which give the desired result. The 
penultimate inequality is just vA > A for any < A < 1. 
The last inequality in this sequence follows from the good 
performance of the quantum successive cancellation decoder 
for the cq amplitude channels [11 Proposition 4]. 

Appendix D 

Detailed Error Analysis for the Coherent Phase 
Decoder 



We provide details of the error analysis in Section IV-Bl for 
the second decoding step, in which Bob coherently recovers 
the phase information. We can prove that the phase decoder 
works well with a uniformly random choice of the bits ux 
and uz- Observe that a uniformly random choice of the bits 
uz induces a uniform distribution of the bits xz- Let us fix a 
value of xz- Then, a similar error analysis as in Appendix ICl 
then works for this case. The ideal state resulting from the 
second decoding step is given in d74l ). This state is the same 
as in d32l with a fixed, but randomly-chosen value of xz- 
The actual state from using the coherent decoder Vp in [31] 
is given in (l76*l l, The overlap between the above two states is 
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(65) 



u",,u„,v. 



nfuTD - /mwmi E (— i)^^ ^ l^> a/^^I^ 7 !^^^^^^^^)^"^"!^)!^)!^) l^^>|-"^> (66) 

V 2' l l l l l u A ,u B ,v x . » 



/,t, ivr.actual \ _ 1 f_ 1 ■("*+*'*) /,„ I \( UB ' uz h m \B N E N /-- 7 x 

\*2;u x ,u z \*2;ux,u z / ~ n\A\+\B\ + \X\ A^i ^ ' \ l fu A ,uz ,v' x ,«B I \ ^u A ,v' x \Vu A ,u z ,v x ,"e / ' > 



2 |.A| + |B| + |*| 

U A ,U B ,V X,V 



^u x ,u z {^2-,u x ,u z mT x u z )} (68) 

B N E N 



I 1_ "V (-\\ Ux i v 'x +Vx )(w , \J A (UB ' Uz) \in \ J 

2|.A| + |B| + |*| + |.Z| 2l*l ^ ' Wu A ,u z ,v' x ,u B \ Y u A ,v' x \Vu A ,u z ,v x ,u B l 

u x ,u z u A ,u B ,v x ,v' x 



(69) 



2I- 4 ! 

u A ,u B ,v x ,v' x ,u z 



- I V 5> (u> , U/A (ub '" 2) Ig9 ) bNeN (70) 

2\A\ + \B\ + \X\ + \Z\ u v x ,v x \H j u a m z ,v x ,u b I y ^Va,"* lf«4,ti2,w,<iB/ 



— 2|«4| + |B| + |AT| + |2| /E { l Pu A ,u z ,v x ,u B I \J ^-u A ,v x ^ \ ( Pu A ,u z ,v x ,u B ) 

u A ,u B ,v x ,u z 

— 2\A\ + \B\+\X\ + \Z\ E/ ( < ^"^>MZ>fA?,MBl'^-U > f,W^^l¥'M^,'"Z,'!'Ar,«B) 



(71) 
(72) 



> 1-0(2-*""), (73) 



|H^) = E |^)^'^' xb ' X2 [V^' N |^^,b)|^)|^)|^)|^), (74) 

|S^> = ufVpUf" ( ^jgj E I^^^'^^C^^I^^.b)!^) ) (75) 

= I y 



=L== E \3a)U?" Jr^uF *Z'*>"*wu„u£"'\*j^, X j B ) \x' A ) \x' z ) \u x ) \x B ) . 

(76) 



/"ideal I —actual \ 

^tb| E (77) 



2l-4|+|B| 



^^AT+m E <*^,*,b|^^-^>-^^^ (78) 



2l-4|+|B| 



E^,x 2 {(S^ 1 t/ JS^l)} (79) 

(80) 

> 1 - 0(2-^), (81) 
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analyzed in d77li-(|78Tl. Taking the expectation of this term over 
a uniformly random choice of ux and uz (which implies a 
uniformly random choice of x£) leads to the steps in (T79T> - (TSTb . 
The last inequality of this sequence again follows from the 
performance of the quantum successive cancellation decoder 
for the phase channels. 
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